Currently, most /metrics endpoints don't offer any sort of rate limiting.

It would be nice if exporter-toolkit would provide two rate limits that can be user specified.

• global: queries per second
• per client IP: queries per second

if the limit is reached it should return HTTP 429.

This would help users of this library to set up better protection against malign clients.